CompTIA SY0-401 Online Practice Questions and Exam Preparation

CompTIA SY0-401 Online Questions & Answers

• Question 551:

  Which of the following types of data encryption would Matt, a security administrator, use to encrypt a specific table?

  A. Full disk
  B. Individual files
  C. Database
  D. Removable media
  C. Database

  ---

  A table is stored in a database. Database encryption makes use of cryptography functions that are built into the database software to encrypt the data stored in the database. This often offers granular encryption options which allows for the encryptions of the entire database, specific database tables, or specific database fields, such as a credit card number field.

• Question 552:

  A new hire wants to use a personally owned phone to access company resources. The new hire expresses concern about what happens to the data on the phone when they leave the company. Which of the following portions of the company's mobile device management configuration would allow the company data to be removed from the device without touching the new hire's data?

  A. Asset control
  B. Device access control
  C. Storage lock out
  D. Storage segmentation
  B. Device access control

• Question 553:

  A user, Ann, is reporting to the company IT support group that her workstation screen is blank other than a window with a message requesting payment or else her hard drive will be formatted. Which of the following types of malware is on Ann's workstation?

  A. Trojan
  B. Spyware
  C. Adware
  D. Ransomware
  D. Ransomware

  ---

  Ransomware is a type of malware which restricts access to the computer system that it infects, and demands a ransom paid to the creator(s) of the malware in order for the restriction to be removed. Some forms of ransomware encrypt files on the system's hard drive), while some may simply lock the system and display messages intended to coax the user into paying. Ransomware typically propagates as a trojan like a conventional computer worm, entering a system through, for example, a downloaded file or a vulnerability in a network service. The program will then run a payload: such as one that will begin to encrypt personal files on the hard drive. More sophisticated ransomware may hybrid-encrypt the victim's plaintext with a random symmetric key and a fixed public key. The malware author is the only party that knows the needed private decryption key. Some ransomware payloads do not use encryption. In these cases, the payload is simply an application designed to restrict interaction with the system, typically by setting the Windows Shell to itself, or even modifying the master boot record and/or partition table (which prevents the operating system from booting at all until it is repaired)

  Ransomware payloads utilize elements of scareware to extort money from the system's user. The payload may, for example, display notices purportedly issued by companies or law enforcement agencies which falsely claim that the system had been used for illegal activities, or contains illegal content such as pornography and pirated software or media. Some ransomware payloads imitate Windows' product activation notices, falsely claiming that their computer's Windows installation is counterfeit or requires re-activation. These tactics coax the user into paying the malware's author to remove the ransomware, either by supplying a program which can decrypt the files, or by sending an unlock code that undoes the changes the payload has made.

• Question 554:

  Which of the following will provide data encryption, key management and secure application launching?

  A. TKIP
  B. HSM
  C. EFS
  D. DLP
  D. DLP

• Question 555:

  During a recent audit, the auditors cited the company's current virtual machine infrastructure as a concern. The auditors cited the fact that servers containing sensitive customer information reside on the same physical host as numerous virtual machines that follow less stringent security guild lines. Which of the following would be the best choice to implement to address this audit concern while maintain the current infrastructure?

  A. Migrate the individual virtual machines that do not contain sensitive data to separate physical machines
  B. Implement full disk encryption on all servers that do not contain sensitive customer data
  C. Move the virtual machines that contain the sensitive information to a separate host
  D. Create new VLANs and segment the network according to the level of data sensitivity
  D. Create new VLANs and segment the network according to the level of data sensitivity

• Question 556:

  When implementing fire suppression controls in a datacenter it is important to:

  A. Select a fire suppression system which protects equipment but may harm technicians.
  B. Ensure proper placement of sprinkler lines to avoid accidental leakage onto servers.
  C. Integrate maintenance procedures to include regularly discharging the system.
  D. Use a system with audible alarms to ensure technicians have 20 minutes to evacuate.
  B. Ensure proper placement of sprinkler lines to avoid accidental leakage onto servers.

  ---

  Water-based systems can cause serious damage to all electrical equipment and the sprinkler lines in a fire suppression control system should be placed in such a way so as not to leak onto computers when it do get activated because it works with overhead nozzles.

• Question 557:

  Purchasing receives a phone call from a vendor asking for a payment over the phone. The phone number displayed on the caller ID matches the vendor's number. When the purchasing agent asks to call the vendor back, they are given a different phone number with a different area code.

  Which of the following attack types is this?

  A. Hoax
  B. Impersonation
  C. Spear phishing
  D. Whaling
  B. Impersonation

  ---

  In this question, the impersonator is impersonating a vendor and asking for payment. They have managed to `spoof' their calling number so that their caller ID matches the vendor's number.

  Impersonation is where a person, computer, software application or service pretends to be someone or something it's not. Impersonation is commonly non-maliciously used in client/server applications. However, it can also be used as a

  security threat.

• Question 558:

  A company has implemented full disk encryption. Clients must authenticate with a username and password at a pre-boot level to unlock the disk and again a username and password at the network login. Which of the following are being used? (Select TWO)

  A. Multifactor authentication
  B. Single factor authentication
  C. Something a user is
  D. Something a user has
  E. Single sign-on
  F. Something a user knows
  B. Single factor authentication
  F. Something a user knows

• Question 559:

  Which of the following should identify critical systems and components?

  A. MOU
  B. BPA
  C. ITCP
  D. BCP
  D. BCP

• Question 560:

  In order to use a two-way trust model the security administrator MUST implement which of the following?

  A. DAC
  B. PKI
  C. HTTPS
  D. TPM
  B. PKI

  ---

  PKI is a high level concept. Within a PKI you use a trust model to set up trust between Certification Authorities (CAs).

  A public key infrastructure (PKI) is a set of hardware, software, people, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.